I need to control the use of administrative user accounts in some servers. I know that there is an "information gathered" QID that brings a list of all administrative users within a given host. Is there anyway to use Qualys to warn me when new users are included in a server? How? Should I use VM or PC for that?
Fo example: If a scan a certain host and find 5 adm users, I wish Qualys to compare the users list with auser list I had acquired in a previous scan and send me and alert, ticket, e-mail, etc.
Thak you very much!